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DETAILED ACTION 

1 . This Office Action is the answer to the Amendment filed on January 24, 2005, 
which paper has been placed of record in the file. 

2. Claims 41-66 have been added. 

Claims 1 , 3-9, and 1 1-66 are pending in this application. 

Response to Arguments/Amendment 

3. Applicant's arguments with respect to claims 1 , 3-9, and 1 1 -66 have been 
considered but are not persuasive and are moot in view of new grounds of rejection. 

In the arguments, applicant stated that Talati does not disclose the feature of 
"transmitting a query for said authorization number over said network from said third 
party contractor location to said consumer location". Examiner respectfully disagrees. 
See Talali column 5, lines 33-40 and column 6, lines 25-32, the credit authority (CA) 60 
may query the client processor 70 for various items of information that only the client 
would know such as mother maiden name, social security number, driver license 
number, etc., thus Talati does disclose the feature of "transmitting a query for said 
authorization number over said network from said third party contractor location to said 
consumer location". Therefore, examiner decides to maintains Talali as a prior art for 
rejection as indicated in the previous Office action. 

4. Applicant's amendment necessitated the new grounds of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
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§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Claim Rejections - 35 USC § 102 

5. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 

form the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(e) the invention was described in (1 ) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

6. Claims 1 , 3-9, 1 1 -26, 28, 31 , 37, 38, 51 , 53, 57, 59, 61 , and 65 are rejected under 
35 U.S.C. 102(e) as being anticipated by Talati et al (hereinafter Talati), U.S. Patent No. 
5,903,878. 
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Regarding to claim 1 , Talati discloses a method for making purchases over a 
computer network using an account number that identifies a consumer's account from 
which funds will be withdrawn to pay a purchase price and an authorization data 
associated with account number which, when used with account number, enable 
withdrawal of funds from account (column 6, lines 25-43, the confirmation of the client 
when used with credit card transaction enable the credit authority authorized the 
transaction, when the transaction is authorized, the funds is withdrawal from the client's 
account), method comprising the steps of: 

transmitting account number over network from a consumer location to an on-line 
merchant location (figures 1 , 3, column 5, lines 55-62; the client 50 transmits the 
purchase order and credit card number to the merchant 55); 

forwarding account number over network from on-line merchant location to a 
third party contractor location (column 5, lines 62-67; the merchant 55 transmits credit 
card number over the Internet or a private network to the credit authority (CA) 60); 

transmitting a query for authorization data over network from third party 
contractor location to consumer location (column 6, lines 25-32; the CA 60 transmits a 
query for a authorization data to the client 50); 

transmitting authorization data over network from consumer location to third party 
contractor location, bypassing on-line merchant location (column 6, lines 6, lines 33-60; 
the client 50 transmits the authorization data directly to the CA 60); and 

after account number and authorization data are received at third party 
contractor location, verifying the validity of account number and authorization data 
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(column 6, lines 33-43, column 7, lines 37-44; the CA 60 verified the account number 
and the confirmation by the client of transaction validity). 

Regarding to claim 3, Talati further discloses account number and authorization 
data are transmitted over network via encrypted connection (column 6, lines 9-17). 

Regarding to claim 4, Talati further discloses network is the Internet (column 5, 
lines 62-67). 

Regarding to claims 5-7, Talati further discloses checking at third party contractor 
location whether account has sufficient funds to cover purchase price and transmitting a 
signal from third party contractor location to on-line merchant location indicating whether 
there are sufficient funds in account to cover purchase price and whether account 
number and authorization data are valid (column 6, lines 35-40; the CA checks the 
credit limit, a confirmation by client and transmits a rejection to the merchant). 

Regarding to claim 8, Talati further discloses transmitting a signal from 
on-line merchant location to consumer location indicating whether purchase has been 
authorized (column 6, lines 39-40; the client is notified by the merchant of the rejection). 

Regarding to claim 28, Talati further discloses consumer location is a consumer 
computer, on-line merchant location is an on-line merchant computer, and third party 
contractor location is a third party contractor computer (figure 3 and column 4, lines 58- 
65; processor 70, 75, 61 ). 

Claims 9, 1 1 -1 6 are system claims that have similar the limitations found in 
claim 1, 3-8, as discussed above, therefore, are rejected by the same rationale. 
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Claims 17-21, 31, 51, 53 have similar limitations found in claims 1, 3-8, 28, as 
discussed above therefore, are rejected by the same rationale. 

Claims 22-26 are system claims that have similar the limitations found in claims 
17-21, therefore, are rejected by the same rationale. 

Claims 37, 38, 57 are written in means that are parallel the limitations found in 
claims 1, 17, 51 as discussed above, therefore are rejected by the same rationale. 

Regarding to claims 59, 61 , and 65, Talati further discloses wherein the 
authorization number is a user-selected authorization number (column 5, lines 33-40 
and column 6, lines 25-32, the credit authority (CA) 60 may query the client processor 
70 for various items of information that only the client would know such as mother 
maiden name, social security number, driver license number, etc.) 

Claim Rejections - 35 USC § 103 

7. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

8. Claims 27, 29, 30, and 32 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Talati et al (hereinafter Talati), U.S. Patent No. 5,903,878, in view of 
Blonder et al (hereinafter Blonder), U.S. Patent No. 5,708,422. 

Regarding to claims 27, 29, 30, 32, Talati does not disclose account number is 
an ATM card number and authorization number is a PIN associated with ATM card 
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number. However, Blonder discloses account number is an ATM card number and 
authorization number is a PIN associated with ATM card number (column 4, line 62- 
collumn 5, line 5). Blonder also discloses the transaction processing center of the credit 
card provider having the validation database 106 (column 12, lines 10-30) requests the 
cardholder to provide a secret code that matched a similar code included in the 
response received from the cardholder (column 10, lines 30-67). Moreover, Talati 
discloses the CA 60 may query the client for various items of information that only the 
client would known such as mother's maiden name, driver's license number, etc. 
Therefore, it would have been obvious to one with ordinary skill in the art at the time the 
invention was made to modify Talati's to include the ATM card in the transaction for the 
purpose of providing more convenient for the consumer when using the ATM card to 
conduct the purchase transaction because the money is withdrawn directly from the 
consumers bank account. Moreover, because the CA 60 in Talati's system queries the 
client for various items of information that only the client would known, thus it would 
have been obvious to one with ordinary skill in the art at the time the invention was 
made to include the PIN associated with ATM card number in Talati's various items of 
information in case of transaction using ATM card, for the purpose of providing the 
overall security of electronic commerce using the ATM card. 
9. Claims 33-36, 39, 40, 45-48, 55, 56, 63, and 64 are rejected under 35 
U.S.C. 103(a) as being unpatentable over Talati et al (hereinafter Talati), U.S. Patent 
No. 5,903,878, in view of Blonder et al (hereinafter Blonder), U.S. Patent No. 5,708,422, 
and further in view of Sixtus, U.S. Patent No. 5,903,721 . 
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Regarding to claim 33, Talati discloses a method of making purchases over the 
Internet comprising the steps: 

transmitting a card number which used to pay a purchase price over the Internet 
from a consumer's computer to an on-line merchant's web site (figures 1 , 3, column 5, 
lines 55-62; the client 50 transmits the purchase order and credit card number to the 
merchant 55); 

forwarding the card number over the Internet from on-line merchant's web site to 
a verification computer (column 5, lines 62-67; the merchant 55 transmits credit card 
number over the Internet or a private network to the credit authority (CA) 60); 

transmitting over the Internet from the verification computer to consumer's 
computer a request for an authorization data associated with the card number (column 
6, lines 25-32; the CA 60 transmits a query for a authorization data to the client 50); 

inputting the authorization data into the consumer's computer and transmitting 
the authorization data over the Internet from consumer's computer to the verification 
computer (column 6, lines 6, lines 33-60; the client 50 transmits the authorization data 
directly to the CA 60); and 

determining using the verification computer whether the card number and the 
authorization data are valid (column 6, lines 33-43, column 7, lines 37-44; the CA 60 
verified the account number and the confirmation by the client of transaction validity); 
and 

transmitting a message over the Internet from the verification computer to on-line 
merchant's web site indicating whether the card number and the authorization data are 
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valid (column 6, lines 35-40; the CA checks the credit limit, a confirmation by client and 
transmits a rejection to the merchant). 

Talati does not disclose account number is an ATM card number and 
authorization number is a PIN associated with ATM card number. However, Blonder 
discloses account number is an ATM card number and authorization number is a PIN 
associated with ATM card number (column 4, line 62-collumn 5, line 5). Blonder also 
discloses the transaction processing center of the credit card provider having the 
validation database 106 (column 12, lines 10-30) requests the cardholder to provide a 
secret code that matched a similar code included in the response received from the 
cardholder (column 10, lines 30-67). Moreover, Talati discloses the CA 60 may query 
the client for various items of information that only the client would known such as 
mother's maiden name, driver's license number, etc. Therefore, it would have been 
obvious to one with ordinary skill in the art at the time the invention was made to modify 
Talati's to include the ATM card in the transaction for the purpose of providing more 
convenient for the consumer when using the ATM card to conduct the purchase 
transaction because the money is withdrawn directly from the consumer's bank account. 
Moreover, because the CA 60 in Talati's system queries the client for various items of 
information that only the client would known, thus it would have been obvious to one 
with ordinary skill in the art at the time the invention was made to include the PIN 
associated with ATM card number in Talati's various items of information in case of 
transaction using ATM card, for the purpose of providing the overall security of 
electronic commerce using the ATM card. 
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Talati does not disclose consumer's computer having a web browser. However, 
Sixtus discloses consumer's computer having a web browser (column 6, lines 33-53). 
Therefore, it would have been obvious to one with ordinary skill in the art at the time the 
invention was made to modify Talati's to include a web browser in consumer's computer 
for the purpose of providing a mechanic for the consumer to access the Internet. 

Claims 34-36, 55 have similar limitations found in claim 33 above, therefore are 
rejected by the same rationale. 

Regarding to claims 39, 40, Talati does not disclose the on-line merchant web site 
is configured to generate a session identifier that includes an electronic address for the 
consumer's computer and configured to forward the ATM account number with the 
session identifier to the verification computer. However, Sixtus discloses the on-line 
merchant web site is configured to generate a session identifier that includes an 
electronic address for the consumer's computer and configured to forward the session 
identifier to the verification computer (column 7, lines 12-17; column 10, lines 3-10, lines 
52-55; the vendor computer transmits the IP address of the user to the trust server). 
Therefore, it would have been obvious to one with ordinary skill in the art at the time the 
invention was made to modify Talati's to include the feature above for the purpose of 
providing the IP address of the consumer's computer to the CA, thus the CA can send 
the query information to the consumer's computer in order to validate the transaction. 

Regarding to claims 45-46, 56, 64, Talati does not disclose initiating a 
communication connection of said network between the consumer location and the third 
party contractor location, wherein the initiating is performed from the on-line merchant 
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location, or the on-line merchant computer initiates a communication connection 
between the consumer computer and the contractor computer. However, Sixtus 
discloses initiating a communication connection of said network between the consumer 
location and the third party contractor location, wherein the initiating is performed from 
the on-line merchant location, or the on-line merchant computer initiates a 
communication connection between the consumer computer and the contractor 
computer (column 10, lines 3-10, 52-52-55; the vendor computer 14 transmits the IP 
address of the user computer to the trust server 1 8, the trust server then communicates 
with the user computer by sending a data request to the IP address that was received 
from the vendor computer). Therefore, it would have been obvious to one with ordinary 
skill in the art at the time the invention was made to modify Talati's to include the feature 
above for the purpose of providing the IP address of the consumer's computer to the 
CA, thus the CA can send the query information to the consumer's computer in order to 
validate the transaction. 

Regarding to claims 47-48, Talati does not disclose receiving at the verification 
computer an Internet communication connection to a merchant provided window on a 
consumer's computer which is private to the verification computer. However, this feature 
is well known in the art. Therefore, it would have been obvious to one with ordinary skill 
in the art at the time the invention was made to modify Talati's to include the feature 
above for the purpose of enhancing the security. 

Regarding to claim 63, Talati further discloses wherein the authorization number 
is a user-selected authorization number (column 5, lines 33-40 and column 6, lines 25- 
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32, the credit authority (CA) 60 may query the client processor 70 for various items of 
information that only the client would know such as mother maiden name, social 
security number, driver license number, etc.) 

10. Claims 41-44, 49, 50, 52, 54, 58, 60, 62, and 66 are rejected under 35 
U.S.C. 103(a) as being unpatentable over Talati et al (hereinafter Talati), U.S. Patent 
No. 5,903,878, in view of Sixtus, U.S. Patent No. 5,903,721. 

Regarding to claims 41-44, 49, 50, 52, 54, 58, 60, 62, and 66, Talati does not 
disclose initiating a communication connection of said network between the consumer 
location and the third party contractor location, wherein the initiating is performed from 
the on-line merchant location, or the on-line merchant computer initiates a 
communication connection between the consumer computer and the contractor 
computer. However, Sixtus discloses initiating a communication connection of said 
network between the consumer location and the third party contractor location, wherein 
the initiating is performed from the on-line merchant location, or the on-line merchant 
computer initiates a communication connection between the consumer computer and 
the contractor computer (column 10, lines 3-10, 52-52-55; the vendor computer 14 
transmits the IP address of the user computer to the trust server 18, the trust server 
then communicates with the user computer by sending a data request to the IP address 
that was received from the vendor computer). Therefore, it would have been obvious to 
one with ordinary skill in the art at the time the invention was made to modify Talati's to 
include the feature above for the purpose of providing the IP address of the consumer's 
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computer to the CA, thus the CA can send the query information to the consumer's 
computer in order to validate the transaction. 

Conclusion 

1 1 . Claims 1 , 3-9, and 1 1-66 are rejected. 

12. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to examiner Nga B. Nguyen whose telephone number is 
(571 ) 272-6796. The examiner can normally be reached on Monday-Thursday from 
9:00AM-6:00PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Hyung S. Sough can be reached on (571) 272-6799. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the Group receptionist whose telephone number is 
(571)272-3600. 

13. Any response to this action should be mailed to: 

Commissioner of Patents and Trademarks 
C/o Technology Center 3600 
Washington, DC 20231 

Or faxed to: 

(571) 273-8300 (for formal communication intended for entry), 

or 
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(571) 273-0325 (for informal or draft communication, please label 
"PROPOSED" or "DRAFT"). 

Hand-delivered responses should be brought to Knox building, 501 Dulany 
Street, Alexandria, VA, First Floor (Receptionist). 



Nga B. Nguyen 



